Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
File: DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft (raw, json)
Hash identifier: ZbERuNrBkmPw7IDCk30Va8xtOOFzVCIt2lKlAL+Wv4o=
Subject key identifier: C1:74:14:46:D9:67:9F:A1:18:4B:16:51:BA:F4:00:2B:E1:BF:05:2A
Authority key identifier: 0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B
Certificate issuer: /CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b
Certificate serial: 019A70A51C5E6251152C4EE0621C4D7B7391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
Manifest number: 13F9
Signing time: Tue 11 Nov 2025 02:01:00 +0000
Manifest this update: Tue 11 Nov 2025 02:01:00 +0000
Manifest next update: Wed 12 Nov 2025 02:01:00 +0000
Files and hashes: 1: DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl (hash: BrxtGGiNsEHltkt5/lSN+AV7nLmW8ssJdsWazYRB2bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:1c:5e:62:51:15:2c:4e:e0:62:1c:4d:7b:73:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b
Validity
Not Before: Nov 11 02:01:00 2025 GMT
Not After : Nov 12 02:01:00 2025 GMT
Subject: CN=c1741446d9679fa1184b1651baf4002be1bf052a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3b:e9:d9:e9:8f:b7:0d:e6:9a:9d:3f:a7:d4:
85:69:39:74:da:8a:f6:19:3f:16:c1:c9:2d:56:d8:
91:1f:6b:b1:59:aa:be:0f:28:72:ec:c5:74:b4:ff:
83:e7:46:74:9f:e9:19:b0:15:a1:ee:78:2c:8a:f8:
44:f6:e0:5a:a2:69:58:8d:99:bb:53:da:52:07:5c:
53:7f:74:12:d0:f4:f1:96:68:20:42:c8:1f:d3:28:
8f:24:2e:7a:f6:1a:8f:89:97:af:89:fe:74:e4:c7:
ca:93:37:fa:5a:e4:36:7f:fe:f0:3f:fb:85:ff:b5:
05:24:90:dd:60:3d:9b:a8:4e:c4:02:b2:b3:c4:db:
2e:a8:95:20:b7:3c:e9:f9:e7:34:7b:3e:d0:47:0b:
15:ae:2a:1e:38:ea:f3:d7:17:c3:fd:7f:a9:40:32:
fd:c3:af:98:ae:a7:0f:78:9f:c8:5a:39:38:11:44:
68:15:65:92:93:d5:31:9e:82:14:43:96:a0:41:21:
b3:e1:2c:42:2e:2c:c1:c8:80:c1:28:0b:30:4a:05:
45:bc:5b:fa:78:ac:be:c5:6e:33:07:02:cd:97:31:
a7:41:3c:fe:46:28:b8:61:5e:ca:47:88:13:76:16:
87:79:f5:2c:98:2a:c0:c9:ff:52:c8:c8:49:49:32:
8e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:74:14:46:D9:67:9F:A1:18:4B:16:51:BA:F4:00:2B:E1:BF:05:2A
X509v3 Authority Key Identifier:
keyid:0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ff:64:f4:ea:6d:a1:6e:33:b3:69:b6:dc:93:aa:75:02:db:
69:2a:db:6a:d0:30:4f:fc:69:ad:7e:f1:91:ca:99:20:e5:f2:
17:dd:61:f9:39:55:3c:35:bc:7e:5c:8d:6f:6a:e5:f1:c2:e7:
28:23:c8:dc:15:dd:77:cf:5e:e5:57:73:6a:f3:b1:e1:1f:a1:
da:10:07:a0:dd:21:24:6b:8f:7c:3c:61:db:e9:90:ae:ca:f9:
2d:37:e5:84:38:98:f5:d7:1a:c2:2d:ac:1c:9b:d7:fe:d2:e4:
c8:a3:92:7f:33:85:60:3c:1f:06:7f:42:d9:3b:29:2d:73:53:
53:99:21:db:d5:cf:29:26:89:b9:72:58:b0:5b:ff:7d:9e:5a:
8b:ce:b4:86:2b:fb:78:fa:e4:44:b7:fc:68:e4:dc:35:1c:ff:
17:9a:c5:0d:aa:f0:ca:72:11:b3:7b:5b:76:ee:55:aa:b2:e7:
3d:b8:c0:79:72:8a:f0:b3:05:69:4f:95:75:38:d3:7a:86:75:
61:33:57:12:7e:5a:c3:01:1f:c5:2d:b0:8a:5c:62:2e:7f:d9:
c9:c9:12:c2:8e:c5:60:15:f9:75:53:1a:ef:60:bb:fc:7f:71:
a0:3c:a2:4c:87:49:bb:b7:d1:6d:8f:07:e2:b1:db:f8:6b:81:
ab:3c:dd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:37 2025 by rpki-client